MLflow Path Traversal Vulnerability

GHSA-wv8q-4f85-2p8p · BIT-mlflow-2023-6976 · CVE-2023-6976 · PYSEC-2026-1662 · 갱신 2026. 7. 8.

해야 할 일

mlflow: 2.9.2 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	mlflow	2.9.2

MLflow Path Traversal Vulnerability

This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.

MLflow Path Traversal Vulnerability (GHSA-wv8q-4f85-2p8p) · Sieve